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In the Claims: 

1 . (Currently Amended) A method for secure communication comprising: 
generating a plurality of virtual private proxies p fo^w based on an agreement between 

a first entity and a second entity; 

associating a first virtual private proxy of the plurality of virtual private proxies w ith 
the first entity and a second virtual private proxy of the plurality of virtual private proxies 
with the second entity; 

monitoring data at the first virtual private proxy associated with the first entity; 

determining whether the data violates the agreement; and 

disallowing commimication of the data fi-om the first virtual private proxy to the 
second virtual private proxy when the data violates the agreement. 

2. (Original) The method for seciu-e conununication according to Claim 1, 
wherein determining whether the data violates the agreement comprises: 

examining the data with respect to the agreement at the first virtual private proxy; 
determining whether the data is allowed by the agreement; and 
indicating a violation when the data does not conform to the agreement. 

3. (Original) The method for secure communication according to Claim 2, 
wherein generating the violation comprises: 

generating an alarm based on the violation; 
communicating the alarm to an appropriate entity; and 
logging the violation. 

4. (Original) The method for secure communication according to Claim 3, 
wherein the appropriate entity is a systems administrator and wherein disallowing the data 
comprises discarding the data when the data violates the agreement. 

5. (Original) The method for secure communication according to Claim 3, 
wherein the alarm comprises information associated with the violation. 
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6. (Original) The method for secure commvmication according to Claim 1, 
wherein the first virtual private proxy comprises a logical representation of a logical access 
point between the first entity and a secvire switch. 

7. (Original) The method for secure communication according to Claim 1, 
wherein the first virtual private proxy comprises a logical representation of a physical access 
point between the first entity and a secure switch. 

8. (Original) The method for secure communication according to Claim 1, 
wherein the agreement comprises types of data allowed. 

9. (Original) The method for secure commxmication according to Claim 8, 
wherein the agreement fiirther comprises a transport protocol indication and a transport 
secxirity protocol indication and wherein the type of data allowed comprises XML data. 

10. (Original) The method for secure communication according to Claim 9, 
wherein the agreement fiirther comprises a document exchange protocol indication and a 
process specification document indication. 

11. (Original) The method for secure communication according to Claim 1, 
wherein monitoring the data comprises monitoring data received at the first virtual private 
proxy fi-om the first entity. 

12. (Original) The method for secure communication according to Claim 1, 
wherein monitoring the data comprises monitoring data received at the first virtual private 
proxy to be communicated to the first entity. 
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13. (Currently Amended) A system for secure communication comprising: 

means for generating a plurality of virtual private proxies pfe^ey based on an 
agreement between a first entity and a second entity; 

means for associating a first virtual private proxy of the pluralitv of virtual private 
proxies with the first entity and a second virtual private proxy of the pluralitv of virtual 
private proxies with the second entity; 

means for monitoring data at the first virtual private proxy associated with the first 

entity; 

means for determining whether the data violates the agreement; and 
means for disallowing commimication of the data fi-om the first virtual private proxy 
to the second virtual private proxy when the data violates the agreement. 
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14. (Currently Amended) A system for secure communication comprising: 
logic stored on a medivim and configured oporahlo to- 

generate a plurality of virtual private proxies p ffww based on an agreement 
between a first entity and a second entity; 

associate a first virtual private proxy of the pluralitv of virtual private p roxies 
with the first entity and a second virtual private proxy of the pluralitv of virtual private 
proxies w ith the second entity; 

monitor data at the first virtual private proxy associated with the first entity; 

determine whether the data violates the agreement; and 

disallow communication of the data fi-om the first virtual private proxy to the 
second virtual private proxy when the data violates the agreement. 

15. (Currently Amended) The system for secure communication according to 
Claim 1 4, wherein the logic is fiirther configured operahlo to! 

examine the data with respect to the agreement at the first virtual private proxy; 
determine whether the data is allowed by the agreement; and 
indicate a violation when the data does not conform to the agreement. 

16. (Currently Amended) The system for secure communication according to 
Claim 15, wherein the logic is fiirther configured oporahlo t or 

generate an alarm based on the violation; 
communicate the alarm to an appropriate entity; and 
log the violation. 



17. (Currently Amended) The system for secure conrmiunication according to 
Claim 16, wherein the appropriate entity is a systems administrator and wherein the logic is 
fiirther configured oporablc to discard the data when the data is disallowed. 

18. (Original) The system for secure communication according to Claim 16, 
wherein the alarm comprises information associated with the violation. 
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19. (Original) The system for secure communication according to Claim 14, 
wherein the first virtual private proxy comprises a logical representation of a logical access 
point between the first entity and a secure switch. 

20. (Original) The system for secure communication according to Claim 14, 
wherein the first virtual private proxy comprises a logical representation of a physical access 
point between the first entity and a secure switch. 

21. (Original) The system for secure commimication according to Claim 14, 
wherein the agreement comprises types of data allowed. 

22. (Original) The system for secure commimication according to Claim 21, 
wherein the agreement further comprises a transport protocol indication and a transport 
security protocol indication and wherein the type of data allowed comprises XML data. 

23. (Original) The system for secure communication according to Claim 22, 
wherein the agreement further comprises a document exchange protocol indication and a 
process specification document indication. 

24. (Currently Amended) The method for secure communication according to 
Claim 14, wherein the logic is further configured opcrablo to monitor data received at the first 
virtual private proxy from the first entity. 

25. (Currently Amended) The method for secure commimication according to 
Claim 14, wherein the logic is further configured op e rablo t o monitor data received at the first 
virtual private proxy to be communicated to the first entity. 
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26. (Original) A method for secure communication comprising: 
generating a first virtual private proxy associated with a first entity; 
generating a second virtual private proxy associated with a second entity; 
monitoring communications between the first virtual private proxy and the second 

virtual private proxy based on an agreement for electronic data exchange between the first 
and second entities; and 

responding to violations of the agreement based on the agreement. 

27. (Original) The method according to Claim 26 and fiirther comprising: 
determining a first profile associated with the first entity; 

determining a second profile associated with the second entity; and 
automatically generating the agreement based on the first and second profiles. 

28. (Original) The method according to Claim 26 and fiirther comprising: 
linking the first virtual private proxy to the second virtual private proxy over a link; 

and 

communicating data between the first virtual private proxy and the second virtual 
private proxy over the link. 

29. (Original) The method according to Claim 28, wherein the link comprises 
a logical data link at a secure switch. 

30. (Original) The method according to Claim 26, wherein the first virtual 
private proxy comprises a logical representation of a logical access point. 

31. (Original) The method according to Claim 26, wherein the first virtual 
private proxy comprises a logical representation of a logical access point between the first 
entity and a secure switch. 

32. (Original) The method according to Claim 26, wherein the first and 
second entities respectively comprise a business. 
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33. (Currently Amended) The method according to Claim 27 Claim 26 , wherein 
the first profile comprises at least one indication of business information associated with the 
first entity. 

34. (Currently Amended) The method according to Claim 27 Claim 26 , wherein 
the first profile comprises a transport protocol and a messaging protocol. 

35. (Original) The method according to Claim 34, wherein the first profile 
fiirther comprises a transport security protocol and a specification document. 

36. (Original) The method according to Claim 35, wherein the first profile 
fiirther comprises a name and contact information associated with the first entity. 

37. (Original) The method according to Claim 26, wherein determining the 
violation comprises: 

examining the data with respect to the agreement at the first virtual private proxy; 
determining whether the data is allowed by the agreement; 
determining the violation when the data is not allowed by the agreement; and 
communicating the data to the second virtual private proxy when the data is allowed 
by the agreement. 

38. (Original) The method according to Claim 26, wherein responding to the 
violation comprises: 

generating an alarm based on the violation; 

logging the violation; and 

discarding the data associated with the violation. 

39. (Original) The method according to Claim 38, wherein responding to the 
violation further comprises forbidding communication between the first virtual private proxy 
and the second virtual private proxy. 
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40. (Original) A system for secure communication comprising: 

means for generating a first virtual private proxy associated with a first entity; 

means for generating a second virtual private proxy associated with a second entity; 

means for monitoring communications between the first virtual private proxy and the 
second virtual private proxy based on an agreement for electronic data exchange between the 
first and second entities; and 

means for responding to violations of the agreement based on the agreement. 
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41 . (Currently Amended) A system for secure communication comprising: 
logic stored on storage and configured oporablo t o: 

generate a first virtual private proxy associated with a first entity; 

generate a second virtual private proxy associated with a second entity; 

monitor communications between the first virtual private proxy and the second 
virtual private proxy based on an agreement for electronic data exchange between the first 
and second entities; and 

respond to violations of the agreement based on the agreement. 

42. (Currently Amended) The system according to Claim 41, wherein the logic is 
fiirther configured operable to: 

determine a first profile associated with the first entity; 
determine a second profile associated with the second entity; and 
automatically generate the agreement based on the first and second profiles. 

43. (Currently Amended) The system according to Claim 41, wherein the logic is 
fiirther configured oporablo to: 

link the first virtual private proxy to the second virtual private proxy over a link; and 
communicate data between the first virtual private proxy and the second virtual 
private proxy over the link. 

44. (Original) The system according to Claim 43, wherein the link comprises 
a logical data link at a secure switch. 

45. (Original) The system according to Claim 41, wherein the first virtual 
private proxy comprises a logical representation of a logical access point. 

46. (Original) The system according to Claim 41, wherein the first virtual 
private proxy comprises a logical representation of a logical access point between the first 
entity and a secure switch. 



DALO 1:879079.1 



ATTORNEY DOCKET NO 
021768.1152 



PATENT APPLICATION 
10/040,573 



11 



47. (Original) The system according to Claim 41 , wherein the first and second 
entities respectively comprise a business. 

48. (Currently Amended) The system according to Claim 42 Claim 4 L wherein 
the first profile comprises at least one indication of business information associated with the 
first entity. 

49. (Currently Amended) The system according to Claim 42 ClQim 11 . wherein 
the first profile comprises a transport protocol and a messaging protocol. 

50. (Original) The system according to Claim 49, wherein the first profile 
further comprises a transport security protocol and a specification document. 

51. (Original) The system according to Claim 50, wherein the first profile 
further comprises a name and contact information associated with the first entity. 

52. (Currently Amended) The system according to Claim 41, wherein the logic is 
further configured operable to: 

examine the data with respect to the agreement at the first virtual private proxy; 
determine whether the data is allowed by the agreement; 
determine the violation when the data is not allowed by the agreement; and 
communicate the data to the second virtual private proxy when the data is allowed by 
the agreement. 

53. (Currently Amended) The system according to Claim 41, wherein the logic is 
further configured op e rablo t o: 

generate an alarm based on the violation; 
log the violation; and 

discard the data associated with the violation. 



DALO 1:879079. 1 



ATTORNEY DOCKET NO PATENT APPLICATION 

021768.1152 10/040,573 



12 



54, (Currently Amended) The system according to Claim 53, wherein the logic is 
further configured op e rablo to forbid communication between the first virtual private proxy 
and the second virtual private proxy. 
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55. (Currently Amended) A method for secvire communication comprising: 

generating a plurality of virtual private proxies p re^ based on an agreement between 
a first entity and a second entity; 

wherein the agreement further comprises a document exchange protocol indication 
and a process specification document indication; 

associating a first virtual private proxy of the pluralitv of virtual private proxies with 
the first entity and a second virtual private proxy of the pluralitv of virtual private proxies 
with the second entity; 

wherein the first virtual private proxy comprises a logical representation of a logical 
access point between the first entity and a secure switch; 

monitoring data at the first virtual private proxy associated with the first entity; 

examining the data with respect to the agreement at the first virtual private proxy; 

determining whether the data is allowed by the agreement; 

indicating a violation when the data does not conform to the agreement; and 

disallowing communication of the data fi-om the first virtual private proxy to the 
second virtual private proxy when the data violates the agreement. 
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